iraniangoals.com JavaScript reverse engineering

New to topics? Read the documentation here!

Top articles Latest articles New article in topic

Show body

iraniangoals.com JavaScript reverse engineering by

Ciro Santilli 34 Updated 2024-11-19 Created 1970-01-01

JavaScript file: web.archive.org/web/20110202091909/http://iraniangoals.com/journal.js

Some reverse engineering was done at: twitter.com/hackerfantastic/status/1575505438111571969?lang=en.

Notably, the password is hardcoded and its hash is stored in the JavaScript itself. The result is then submitted back via a POST request to /cgi-bin/goal.cgi.

TODO: how is the SHA calculated? Appears to be manual.

Read the full article